Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/50a3e24b-87f5-316f-b4cb-7e0c125a7a7e.roa
File:                     50a3e24b-87f5-316f-b4cb-7e0c125a7a7e.roa (raw, json)
Hash identifier:          yLhDMHx1jUvEIvkNXzL3bPdAd2KQm5bVh395cPvQA2I=
Subject key identifier:   67:49:F2:46:73:62:92:ED:59:A5:9B:C8:74:39:70:9D:DB:E7:DD:6F
Certificate issuer:       /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
Certificate serial:       010D0C9F4328583AA7C420DD3F67B04335629440
Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/50a3e24b-87f5-316f-b4cb-7e0c125a7a7e.roa
Signing time:             Tue 20 Jul 2021 04:00:00 +0000
ROA not before:           Tue 20 Jul 2021 04:00:00 +0000
ROA not after:            Sun 22 Oct 2023 04:00:00 +0000
asID:                     41264
IP address blocks:        104.132.237.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:a7:c4:20:dd:3f:67:b0:43:35:62:94:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c
        Validity
            Not Before: Jul 20 04:00:00 2021 GMT
            Not After : Oct 22 04:00:00 2023 GMT
        Subject: CN=1b2dee7f-91f3-4506-8dc0-93ea08374d17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:56:3e:a3:dc:9e:31:5c:c2:9b:25:dd:dc:95:
                    f1:14:af:06:78:5f:e3:91:5d:53:2a:a5:87:fe:57:
                    13:4a:9a:0a:22:ea:fe:61:8c:2c:fa:7b:10:41:e5:
                    5e:c6:d1:2c:cd:fa:33:2b:3a:5b:cd:aa:08:55:a8:
                    25:68:e5:9d:30:55:fb:5c:89:2b:48:85:9b:93:db:
                    85:55:90:46:f0:01:f0:cf:d5:c6:ed:f0:73:f5:bc:
                    62:19:eb:fc:e9:db:39:51:eb:38:8f:df:d1:d3:6e:
                    6b:bc:9a:c7:67:9a:36:46:b2:05:0c:f5:18:a2:c8:
                    7f:2d:7c:6c:07:1d:04:1b:86:96:1e:58:86:bb:f9:
                    a0:0a:0b:a7:a3:15:45:07:bb:f3:32:42:91:18:61:
                    39:f8:7a:b6:5d:7e:ed:97:49:08:38:c9:50:77:36:
                    87:c2:47:db:0a:53:df:2b:a6:9e:01:5c:e2:48:c9:
                    b2:3a:0f:20:f6:95:fc:99:82:29:03:dd:ba:40:5f:
                    1a:90:1d:8f:a0:42:d9:2a:d2:07:df:16:f5:f5:d4:
                    56:fe:b7:43:2a:a1:29:59:f9:dd:d3:d0:61:0a:f1:
                    42:ca:57:f7:50:ff:25:51:46:ba:5a:10:25:c2:44:
                    bc:9b:46:d5:f4:7b:c5:cb:03:00:54:45:a2:66:da:
                    b1:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:49:F2:46:73:62:92:ED:59:A5:9B:C8:74:39:70:9D:DB:E7:DD:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/50a3e24b-87f5-316f-b4cb-7e0c125a7a7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl

            X509v3 Authority Key Identifier:
                keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.132.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:2f:0a:7f:61:3d:c9:a6:13:b7:c4:8d:39:cc:3f:c7:f4:9f:
         03:fc:6f:57:29:d4:c9:51:54:a2:a3:c1:5e:f5:51:fe:40:58:
         42:f9:2d:8c:d7:2b:4d:32:a4:fb:c5:8f:08:04:b4:68:01:c5:
         33:46:d3:04:76:ce:0c:40:58:65:41:5c:58:19:65:00:9f:25:
         a6:7f:2d:ce:f5:bd:5c:85:37:95:90:e7:b5:ec:f4:63:f8:d7:
         d5:67:b2:29:4d:78:de:51:e4:de:f9:4a:a5:e4:ba:ed:96:21:
         9f:ec:02:a4:4b:db:13:80:b3:24:2c:bf:17:04:c8:88:1a:d9:
         f6:7a:28:6d:ba:4b:92:a9:7f:d1:23:df:8b:d8:b1:d9:aa:66:
         8c:ab:33:bf:65:d0:3e:ab:d0:ca:79:fb:60:92:66:70:c5:19:
         3a:2b:87:a4:95:96:28:35:7d:62:ff:37:43:b0:68:ee:84:3d:
         52:d7:49:8a:97:f4:a1:68:e7:21:37:8c:1b:23:a0:27:e0:98:
         66:fd:09:25:46:47:29:12:70:9c:c9:21:7d:a7:82:8e:c0:cc:
         c4:bb:af:88:63:bb:bb:6c:46:b7:69:6b:41:ea:f4:9e:c5:1e:
         bf:ff:2a:21:0f:bf:26:c1:00:cf:ba:74:1e:db:ce:00:b7:91:
         2b:2c:93:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----